Medium · 5.3 CVE-2026-97249 EUVD-2026-89913GHSA-vmf3-ww94-p2c3

WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Vendor: Cozmoslabs Product: Paid Member Subscriptions

Description

Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions.

Affected products

Vendor	Product	Affected	Fixed
Cozmoslabs	Paid Member Subscriptions	≤ 3.0.9	—

References

https://patchstack.com/database/wordpress/plugin/paid-member-subscriptions/vulnerability/wordpress-paid-member-subscriptions-plugin-3-0-9-bypass-vulnerability-vulnerability?_s_id=cve vdb-entry